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AMENDED CLAIMS 

[received by the International Bureau on 01 November 2004 (01 1 1 2004} 
The ongmal chums 1 to 17 deleted and these were replaced with renuSoered cto 1 to 12 

(total 5 pages)] 

1 • A rijndael block encryption apparatus having M-bit input data and N-bit 
input keys and encrypting the M-bit input data by repeating for a predetermined 
number of t.mes a round operation that includes transforms of shiftjcow 
substitution, mixcolumn and add-round-key, the apparatus comprising: 
5 a round operation unit including a round operation execution unit for 

processmg the data in the unit of Mmi bits (where m i s 2, 3 or 4) at lease in the 
transforms of substitution, mixcolumn and add-round-key, and a round key 
generation unit for generating round keys in order to provide the round keys in the 
transform of the add-round-key, 

a round operation control unit for controlling the round operation performed 
by the round operation unit; and 

a data storage unit for storing M/n-bit intermediate data generated by the 
round operation unit at an intermediate stage of every round and M-bit data 
generated at an end stage of every round. 

2. The apparatus as claimed in claim 1, wherein the data storage unit 
includes at least one register, and a total summed size of the register is equal to or 
larger than M(2m- 1 )/m bits. 

20 3 - A "J" 0361 W°ck decryption apparatus having M-bit input data and N-bit 

input keys and decrypting the M-bit input data by repeating for a predetermined 
number of times a round operation that includes transforms of inverse shift_row 
inverse substitution, add-round-key and inverse mixcolumn, the apparatus' 
comprising: 

25 a round operation unit including a round operation execution unit for 

processing the data in the unit of M/m bits (where m is 2, 3 or 4) at lease in the 
transforms of inverse substitution, add-round-key and inverse mixcolumn, and a 
round key generation unit for generating round keys in order to provide the round 
keys in the transform of add-round-key; 

30 a round operation control unit for controlling the round operation performed 

by the round operation unit; and 

a data storage unit for storing M/n-bit intermediate data generated by die 
round operation unit at an intermediate stage of every round and M-bit data 
generated at an end stage of every round. 
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4. The apparatus as claimed in claim 3, wherein the data storage unit 
ncludes at least one register, and a total summed size of the register is caul t o 
larger than M(2m-l)/m bits. ^ ° 0r 

5 5. A rijndael block cipher apparatus having M-bit input data and N-bit 

I^o, T encryptin ? * e M - bit ^ ** by r « fOT * 

number of tunes a round operation for encryption that includes Worms of 
smftjrow, substitution, mixcolumn and add-round-key or decrypting the M-bit input 

io 2 I T 8 / 0 ' a predetem,ined nurober of * ™* o P llT 

ZTZ T- ,nClUdeS . traDSfonnS ° f -^ **J°*. averse substLtio, ad" 
round-key and mverse mixcolumn, the apparatus comprising- 

a round operation unit inemding a round operation execution unit for 
procssmg the data in the unit of M/m bits (where m is 2, 3 or 4) at lease i„ the 
-nsfonns of substitution, mixcolumn and add-round-key in an caption ml 
2 * *• «* of Wm bits (where m is 2, 3 or J« lease* 

*. transforms of mverse substitution, add-round-key and inverse mixcolumn in a 

to Tr ' 3 r ° Und ^ «* fc . round keys in order 

to provide the round keys in the transform of add-round-key- 

20 bvthe IT' 0 T ti ° n COntr ° 1 ^ COntr ° lling tbe r ° wd P er *™« 1 
* u oy ttie round operation unit; and 

™,„H * ^ "°T f ° r ^ M/n • b, ' , 4- 8enera«d by tt,e 

generated at an end stage of every round. 

25 6. The apparatus as claimed in claim 5, wherein the round operation 

executaoo unit comprises: operation 

a shift/inverse-shift^ow operation means for performing the shift row 
operation and the inverse sniftn>w operation of the data; 

a substitution/mverse-substitution operation means for performing the 
30 subsumhonopen^nand^ ™« the 

a mixcolunin/inverse-rnixcolumn operation means for performing the 
truxcolumn operation and the inverse mixcolumn operation of tbe data- and 

one™* " ZtT*** 3 ' for P 6 * 0 ™* the add-round-key 

operation of the data. r 
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• The apparatus as claimed in claim 6, wherein the round operation 
execution unit further comprises a plurality of demultiplexing means for controlling 
a flow of the data among the substitution/inverse-substitution operation means the 
m^column/mverse-mixcolumn operation means and the add-round-key operation 
means so as to perform the round operation for the encryption or the round operation 
for the decrypts according to an. input of a mode signal that indicates the 
encryption or decryption mode. 

8. The apparatus as claimed in auy one of claims 5 to 7. wherein the data 
storage umt includes at least one register, and a total summed size of the register is 
equal to or larger than M(2m-l)/m bits. 

9 A rijridael block encryption method for receiving M-bit input data and 
N-b,t input keys and performing a round operation of the input data for a 
predetermined number of times, the method comprising: 

a round operation step of performing a round operation with respect to all m 
data of Mm b.ts, the round operation including sub-steps of a shift row Worm 
for performing a shiftrow of the M-bit data from a previous roundand outpuUing 
only MZm-b,t (where m is 2, 3 and 4) data corresponding to a selection signal to a 
next step, a substitution transform for performing a substitution of the M/m-bit data 
a mixcolumn transform for performing a mixcolumn of the M/m-bit data, and an' 
add-round-key transform for performing an addition of round keys having the same 
size to the M/m-bit data, respectively; and 

a round key generation step of generating the round keys in order to provide 
the round keys at the sub-step of the add-round-key transform. 

10. The method as claimed in claim 9, wherein the data having the size of 
M/m bits can be processed through the steps of the shift_row transform, the 
substitution transform, the mixcolumn transform and the add-round-key transform 
respect vely, and a plurality of the M/m-bit data can be processed through the plurai 
steps selected among ,he four steps at the same time according to a predetermined 
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11. A njndael block decryption method for receiving M-bit input data and 
N-bit input keys and performing a round operation of the input data for a 
predetermined number of times, the method comprising: 

a round operation step of performing a round operation with respect to all m 
data of M/n bits, the round operation including sub-steps of an inverse shift row 
transform for performing an inverse shift_row of the M-bit data from a previous 
round and outputting only M/m-bit (where m is 2, 3 and 4) data corresponding to a 
selection signal to a next step, an inverse substitution transform for perfomnng an 
inverse substitution of the M/m-bit invcrscshilr.row-nansfonned data, an add- 
round-key transform for performing an addition of round keys having the same size 
to the M/m-bU inverse-substituion-transformed data, respectively, and an inverse 
mixcolunin transform for performing an inverse mixcolumn of the M/m-bit add- 
round-key-transfonned data; and 

a round key generation step of generating the round keys in order to provide 
the round keys at the sub-step of the add-round-key transform. 

12. The method as claimed m claim 11, wherein the data having the size of 
M/m bits can be processed through the steps of the inverse shift™ transform the 
mverse substitution transform, the add-round-key transform and the inverse 
mnccolumn transform, respectively, and a plurality of the M/m-bit data can be 
processed through the plural steps selected among the four steps at the same time 
according to a predetermined timing. 
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